[5.0] AuthController - Correct redirection

Redirect back on invalid credentials (or, more explicitly, `/auth/login`?).